Skip to main content
Back to registry

convex-security-check

waynesutton/convexskills

A quick security audit checklist for Convex applications covering authentication, function exposure, argument validation, row-level access control, and environment variable handling.

Installs1
Install command
npx skills add https://github.com/waynesutton/convexskills --skill convex-security-check
Security audits
Gen Agent Trust HubPASS
SocketPASS
SnykPASS
About this skill
A quick security audit checklist for Convex applications covering authentication, function exposure, argument validation, row-level access control, and environment variable handling. Before implementing, do not assume; fetch the latest documentation: Use this checklist to quickly audit your Convex application's security: - Primary: - Production Security: - Functions Auth: - For broader context: - Never run npx convex deploy unless explicitly instructed - Never run any git commands unless explicitly instructed - Always verify user identity before returning sensitive data - Use internal functions for sensitive operations - Validate all arguments with strict validators - Check ownership before update/delete operations - Store API keys in environment variables - Review all public functions for security implications - Missing authentication checks - Always verify identity - Exposing internal operations - Use internalMutation/Query - Trusting client-provided IDs - Verify ownership - Using v.any() for arguments - Use specific validators - Hardcoding secrets - Use environment variables - Convex Documentation: - Convex LLMs.txt: - Authentication: - Production Security: - Functions Auth:

Source description provided by the upstream skill listing. Community reviews and install context appear in the sections below.

Community Reviews

Latest reviews

Sign in to review

No community reviews yet. Be the first to review.

Browse this skill in context
FAQ
What does convex-security-check do?

A quick security audit checklist for Convex applications covering authentication, function exposure, argument validation, row-level access control, and environment variable handling.

Is convex-security-check good?

convex-security-check does not have approved reviews yet, so SkillJury cannot publish a community verdict.

What agent does convex-security-check work with?

convex-security-check currently lists compatibility with codex, gemini-cli, opencode, cursor, github-copilot, claude-code.

What are alternatives to convex-security-check?

Skills in the same category include telegram-bot-builder, flutter-app-size, sharp-edges, iterative-retrieval.

How do I install convex-security-check?

npx skills add https://github.com/waynesutton/convexskills --skill convex-security-check

Related skills

More from waynesutton/convexskills

Related skills

Alternatives in Software Engineering